Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
File: OYEHPCI_dR4z19QOeS9SnRQw-n8.mft (raw, json)
Hash identifier: GZVlmz4jGnXlLwhCr9Oxr7Ia33VldCzY1jUBw8BE2e0=
Subject key identifier: AF:D6:0D:8B:FF:2D:86:2D:0D:9F:20:BB:D1:22:8D:CD:3E:DB:46:6A
Authority key identifier: 39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F
Certificate issuer: /CN=3981073c223f751e33d7d40e792f529d1430fa7f
Certificate serial: 019873E34F3CFBE68B05F278B91F83C6AA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
Manifest number: 37
Signing time: Mon 04 Aug 2025 07:02:13 +0000
Manifest this update: Mon 04 Aug 2025 07:02:13 +0000
Manifest next update: Tue 05 Aug 2025 07:02:13 +0000
Files and hashes: 1: OYEHPCI_dR4z19QOeS9SnRQw-n8.crl (hash: QFmlbuZedjZED8LPWs6O0PV5F8Amaull91SoDBxedGs=)
2: vGkLbSDH1uJpYJ7xzGoQmZeUqxg.roa (hash: 2OV0rpyTFmg8lfpImi7TfQmWayywKrEbAhbjG35gI2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:4f:3c:fb:e6:8b:05:f2:78:b9:1f:83:c6:aa:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3981073c223f751e33d7d40e792f529d1430fa7f
Validity
Not Before: Aug 4 07:02:13 2025 GMT
Not After : Aug 5 07:02:13 2025 GMT
Subject: CN=afd60d8bff2d862d0d9f20bbd1228dcd3edb466a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:6b:da:b0:c8:07:45:61:b6:17:bd:fa:34:
35:0d:79:d5:a9:4f:45:d5:96:e3:bb:6b:13:10:42:
1d:dd:03:e6:5a:01:c2:d4:a3:b9:bd:5a:df:07:61:
3b:5f:2e:91:cc:89:ef:c9:13:0a:f8:0b:f7:e7:0a:
72:e8:63:f5:49:68:30:03:a2:a7:ef:8e:76:d8:d9:
eb:03:37:7c:c3:ec:91:fa:96:e7:17:c3:50:62:4f:
86:c6:f6:ab:a0:c1:16:b7:98:2a:c8:f6:98:22:79:
68:84:e2:7c:fa:08:6b:5e:af:79:c5:43:1b:bb:31:
b7:5c:e9:13:f9:6a:6f:a9:e7:13:1e:0b:94:ed:2b:
4b:9e:30:d8:e3:51:a2:4c:c8:99:95:73:78:8c:79:
07:39:5d:08:6c:03:74:a8:b1:b8:90:cd:ce:47:1a:
29:b4:3f:14:79:c1:bc:d9:47:cc:4d:64:85:8c:cc:
df:c5:c7:41:08:d4:12:9d:dc:38:10:31:76:fd:df:
59:20:d0:55:ed:10:c8:03:4d:06:80:2a:7a:24:99:
0f:2d:d6:ba:39:65:b5:50:c4:eb:ba:e4:8b:d9:ae:
24:6c:80:6a:98:1b:f1:31:3a:28:c9:67:5b:dc:34:
b6:a0:56:d7:d3:3c:51:72:96:51:71:02:4e:9e:d6:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D6:0D:8B:FF:2D:86:2D:0D:9F:20:BB:D1:22:8D:CD:3E:DB:46:6A
X509v3 Authority Key Identifier:
keyid:39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d0:a8:6f:6d:0c:e5:42:f0:78:64:9d:2f:6c:a0:be:5c:09:
4e:a6:5e:88:ae:3c:71:9f:24:6c:dd:d8:27:f2:34:59:47:c4:
d6:67:14:80:af:b6:67:cf:dd:0c:3e:15:68:44:5c:18:db:2c:
d3:2f:9f:df:fa:09:67:c6:36:fb:0f:cc:2a:8c:c5:9d:ca:d9:
e0:6d:dd:df:43:2b:da:4f:cb:54:3e:37:0e:d7:86:84:1b:5d:
58:95:99:53:ea:d0:5a:69:a2:3d:6e:3d:c3:44:43:c9:f5:ba:
a0:31:b2:c7:5c:b2:38:2e:1c:ce:0d:18:be:5d:1e:75:f5:29:
96:50:6f:7e:21:e5:61:75:b2:4d:df:ef:1c:15:06:aa:23:ec:
c4:7f:e9:07:a0:e2:65:b1:37:42:8d:27:9d:a8:3c:1d:a1:01:
fe:91:fc:68:0e:9a:d1:56:71:de:5c:e8:25:42:4a:bb:fe:fc:
3a:6f:f3:d8:01:d2:b6:cf:2b:76:45:b6:14:a7:9c:d8:7f:1d:
ed:d5:aa:4b:7e:b2:17:f3:92:e9:d5:c8:0e:79:83:cb:b4:3e:
3f:c6:fb:05:70:55:e9:ff:09:89:f3:f6:de:18:c8:79:44:c3:
c2:6e:cd:dd:cb:5a:6d:54:b9:73:b4:6c:f7:b5:bd:0e:84:8f:
95:fd:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:13 2025 by rpki-client